oasis_test 0.1.108 → 0.1.110

package/dist/index.js

@@ -4092,7 +4092,26 @@ ${m2.spec.split("\n").map((l) => `  > ${l}`).join("\n")}`);
       `- \`--unresolved\` **\u4F60\u77E5\u9053\u4F46\u6CA1\u89E3\u51B3\u7684** \u2014\u2014 \u514D\u5F97\u4E0B\u6E38\u91CD\u590D\u8E29\u4F60\u5DF2\u7ECF\u8E29\u8FC7\u7684\u5751\u3002\u4F8B\uFF1A\`--unresolved "\u7EBF\u4E0A\u914D\u989D\u6CA1\u786E\u8BA4"\``,
       `- \`--risks\` **\u4EA4\u4ED8\u7269\u672C\u8EAB\u6CA1\u9519\u3001\u4F46\u7528\u7684\u65F6\u5019\u8981\u5F53\u5FC3\u7684** \u2014\u2014 \u4F8B\uFF1A\`--risks "\u5E76\u53D1\u8C03\u7528\u53EF\u80FD\u89E6\u53D1\u9650\u6D41"\``,
       `- \`--next\` **\u5EFA\u8BAE\u4E0B\u6E38\u5148\u505A\u54EA\u4E00\u6B65**\uFF08\u53EF\u9009\uFF09\u2014\u2014 \u4F8B\uFF1A\`--next "\u5148\u8DD1\u4E00\u6B21\u5C0F\u6D41\u91CF\u7070\u5EA6"\``,
-      `\u5199 \`none\` = \u300C\u6211\u786E\u8BA4\u6CA1\u6709\u300D\uFF1B\u4E0D\u5199 = \u300C\u6CA1\u4EBA\u5199\u8FC7\u300D\u3002**\u8FD9\u4E24\u4EF6\u4E8B\u5BF9\u4E0B\u6E38\u5B8C\u5168\u4E0D\u540C\uFF0C\u522B\u6DF7\u3002**`
+      `\u5199 \`none\` = \u300C\u6211\u786E\u8BA4\u6CA1\u6709\u300D\uFF1B\u4E0D\u5199 = \u300C\u6CA1\u4EBA\u5199\u8FC7\u300D\u3002**\u8FD9\u4E24\u4EF6\u4E8B\u5BF9\u4E0B\u6E38\u5B8C\u5168\u4E0D\u540C\uFF0C\u522B\u6DF7\u3002**`,
+      ``,
+      `### \u4F1A\u8BDD\u53EF\u80FD\u88AB\u780D\uFF1A\u4E2D\u9014\u7559\u4E2A\u65AD\u70B9`,
+      // ★ 2026-08-18：`continuity-checkpoint` 此前在任务书里出现 **0 次**——说明书只在
+      // `execution/CONTINUITY.md`（没人读）和 `oasis help` 里。线上 160 条 checkpoint 只有 6 条带
+      // pendingSteps，且全部来自同一个自己跑 `oasis help continuity-checkpoint` 摸出来的 agent。
+      // 「知道的会用、且用得很好」已被实证，缺的只是这段话。
+      // 刻意不写「过去 24 小时发生 N 次」这类统计：任务书是长期提示词，写死的数字会过期变成假话。
+      `\u4F60\u8FD9\u4E00\u8F6E\u968F\u65F6\u53EF\u80FD\u88AB\u780D\u2014\u2014\u8D85\u65F6\u3001\u989D\u5EA6\u6253\u6EE1\u3001\u8282\u70B9\u6389\u7EBF\u90FD\u4F1A\uFF0C\u800C\u4E14**\u662F\u5E38\u4E8B**\u3002\u771F\u88AB\u780D\u65F6\uFF0C\u4E0B\u4E00\u8D9F\u63A5\u624B\u7684\u4EBA\u53EA\u770B\u5F97\u5230\u300C\u4F60\u4E3A\u4EC0\u4E48\u65AD\u300D\uFF0C\u770B\u4E0D\u5230\u300C\u4F60\u5E72\u5230\u54EA\u300D\u2014\u2014\u9664\u975E\u4F60\u7559\u4E86\u65AD\u70B9\u3002`,
+      `\u505A\u5B8C\u4E00\u4E2A\u9636\u6BB5\u3001\u6216\u8981\u5F00\u59CB\u4E00\u4EF6\u53EF\u80FD\u5F88\u4E45\u7684\u4E8B\u4E4B\u524D\uFF0C\u987A\u624B\u8BB0\u4E00\u6761\uFF08\u51E0\u79D2\u8FD4\u56DE\uFF0C\u4E0D\u6253\u65AD\u4F60\uFF09\uFF1A`,
+      // ★ 参数必须是 **JSON string array**（CLI 侧 `JSON.parse` 后校验，见 cli.ts parseStringArrayFlag）。
+      // 这里给的是能逐字复制的真例子——写成自然语言一句话会当场抛 `--pending 必须是 JSON string array`。
+      `\`\`\``,
+      `oasis continuity-checkpoint --trigger stage_completed \\`,
+      `  --completed '["\u8BFB\u9700\u6C42","\u6539 auth \u4E2D\u95F4\u4EF6","\u8DD1\u5355\u6D4B"]' \\`,
+      `  --pending '["\u8865\u96C6\u6210\u6D4B\u8BD5","\u5199\u7ED3\u6848\u62A5\u544A"]' \\`,
+      `  --recoverability partial`,
+      `\`\`\``,
+      `\u4E24\u4E2A\u6570\u7EC4\u90FD\u662F JSON\uFF08\u5355\u5F15\u53F7\u5305\u4F4F\u3001\u91CC\u9762\u7528\u53CC\u5F15\u53F7\uFF09\u3002\u6B65\u9AA4\u540D\u7528\u7A33\u5B9A\u7684\u8BF4\u6CD5\u2014\u2014\u91CD\u8DD1\u65F6\u540C\u4E00\u6B65\u7528\u540C\u4E00\u4E2A\u540D\uFF0C\u4E0B\u4E00\u8D9F\u624D\u8BA4\u5F97\u51FA\u54EA\u4E9B\u5DF2\u7ECF\u505A\u5B8C\u3002\`--recoverability\` \u4E09\u9009\u4E00\uFF1A\`full\`=\u63A5\u624B\u7684\u4EBA\u7167\u7740\u5C31\u80FD\u7EED\u4E0A\u3001\`partial\`=\u80FD\u7EED\u4F46\u8981\u91CD\u505A\u4E00\u90E8\u5206\u3001\`none\`=\u7B49\u4E8E\u4ECE\u5934\u518D\u6765\u3002`,
+      `**\u53EA\u6709\u4F60\u77E5\u9053\u300C\u8FD8\u5269\u4EC0\u4E48\u300D**\u2014\u2014\u7CFB\u7EDF\u80FD\u81EA\u52A8\u8BB0\u4E0B\u4F60\u8DD1\u8FC7\u54EA\u4E9B\u547D\u4EE4\u3001\u4EA4\u5230\u4E86\u54EA\u4E00\u7248\uFF0C\u4F46\u63A8\u4E0D\u51FA\u4F60\u6253\u7B97\u5E72\u4EC0\u4E48\u3002\u522B\u5199\u7A7A\u8BDD\uFF1B\u6CA1\u4EC0\u4E48\u53EF\u5199\u5C31\u4E0D\u5199\uFF0C\u522B\u4E3A\u4E86\u586B\u800C\u586B\u3002`
     ],
     // 兜底（§10）：上次失败了 → 明确告诉它发生了什么 + 怎么破（首选 add-revision 拆出去）
     ...args.lastFailure ? args.lastFailure.resumed ? [
@@ -158863,6 +158882,8 @@ async function listModels(runtime, executablePath) {
       return cachedDiscovery(runtime, async () => await discoverACPModels(executablePath ?? "kimi", "kimi", ["acp"]) ?? []);
     case "kiro":
       return cachedDiscovery(runtime, async () => await discoverACPModels(executablePath ?? "kiro-cli", "kiro", ["acp"]) ?? []);
+    case "reasonix":
+      return cachedDiscovery(runtime, async () => await discoverACPModels(executablePath ?? "reasonix", "reasonix", ["acp"]) ?? []);
     case "openclaw":
       return cachedDiscovery(runtime, () => discoverOpenclawModels(executablePath));
     default:
@@ -158888,7 +158909,12 @@ async function cachedDiscovery(key, fn) {
   if (entry && now < entry.expiresAt) {
     return entry.models;
   }
-  const models = await fn();
+  let models;
+  try {
+    models = await fn();
+  } catch {
+    return [];
+  }
   modelCache.set(key, { models, expiresAt: now + CACHE_TTL_MS });
   return models;
 }
@@ -158958,12 +158984,77 @@ async function discoverCursorModels(bin) {
 async function discoverOpenCodeModels(bin) {
   throw new Error("discoverOpenCodeModels: TODO");
 }
+function isPiDiscoveryNoise(line) {
+  const lower = line.toLowerCase();
+  if (lower.includes("no models match pattern")) return true;
+  if (lower.startsWith("warning:") || lower.startsWith("error:") || lower.startsWith("info:")) return true;
+  return line.includes("`") || lower.includes("--help") || lower.includes("usage:") || lower.includes("unknown flag") || lower.includes("unknown command");
+}
+function parsePiModels(output) {
+  const models = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of output.split("\n")) {
+    const line = raw.trim();
+    if (!line || isPiDiscoveryNoise(line)) continue;
+    const fields = line.split(/\s+/).filter(Boolean);
+    if (fields.length === 0) continue;
+    const first = fields[0];
+    if (first.toLowerCase() === "provider") continue;
+    let id;
+    if (/[:/]/.test(first)) {
+      id = first.replace(":", "/");
+    } else if (fields.length >= 2) {
+      id = `${first}/${fields[1]}`;
+    } else {
+      continue;
+    }
+    const slash = id.indexOf("/");
+    if (slash <= 0 || slash === id.length - 1) continue;
+    if (seen.has(id)) continue;
+    seen.add(id);
+    models.push({ id, label: id, provider: id.slice(0, slash) });
+  }
+  return models;
+}
 async function discoverPiModels(bin) {
-  throw new Error("discoverPiModels: TODO");
+  const out = await runCapture(bin ?? "pi", ["--list-models"]);
+  return out === void 0 ? [] : parsePiModels(out);
 }
 async function discoverAntigravityModels(bin) {
   throw new Error("discoverAntigravityModels: TODO");
 }
+async function runCapture(bin, args, timeoutMs = 15e3) {
+  return await new Promise((resolve10) => {
+    let child;
+    try {
+      child = (0, import_node_child_process8.spawn)(bin, args, { stdio: ["ignore", "pipe", "ignore"], env: { ...process.env } });
+    } catch {
+      resolve10(void 0);
+      return;
+    }
+    let out = "";
+    let settled = false;
+    const done = (v2) => {
+      if (!settled) {
+        settled = true;
+        clearTimeout(timer);
+        resolve10(v2);
+      }
+    };
+    const timer = setTimeout(() => {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      done(void 0);
+    }, timeoutMs);
+    child.stdout?.on("data", (d) => {
+      out += d.toString();
+    });
+    child.on("error", () => done(void 0));
+    child.on("close", (code) => done(code === 0 ? out : void 0));
+  });
+}
 async function discoverACPModels(bin, provider, args = ["acp"]) {
   const child = (() => {
     try {
@@ -160122,6 +160213,20 @@ function joinOutputParts(parts) {
   if (parts.every((p2) => typeof p2 === "string")) return parts.join("");
   return parts;
 }
+function pickApprovalOptionId(params) {
+  const raw = params?.options;
+  if (!Array.isArray(raw)) return LEGACY_APPROVE_OPTION_ID;
+  const options = raw.filter(
+    (o) => typeof o?.optionId === "string"
+  );
+  if (options.length === 0) return LEGACY_APPROVE_OPTION_ID;
+  const byId = options.find((o) => o.optionId === LEGACY_APPROVE_OPTION_ID)?.optionId;
+  const byKind = (kind) => options.find((o) => o.kind === kind)?.optionId;
+  const nonReject = options.find(
+    (o) => !String(o.kind ?? o.optionId).startsWith("reject")
+  )?.optionId;
+  return byId ?? byKind("allow_always") ?? byKind("allow_once") ?? nonReject ?? LEGACY_APPROVE_OPTION_ID;
+}
 function normalizeACPUpdate(data) {
   const d = data;
   if (!d) return ["", data];
@@ -160370,7 +160475,8 @@ async function runACPSession(job, cfg) {
       if (reason === "cancelled") finish({ code: null, reason: "cancelled", transcriptRef });
     },
     () => streamingCurrentTurn,
-    cfg.finalUsageIsAuthoritative === true
+    cfg.finalUsageIsAuthoritative === true,
+    cfg.vendorUsageNotification
   );
   usageClient = client;
   const rl = readline3.createInterface({ input: child.stdout });
@@ -160540,7 +160646,7 @@ ${task}` : task;
     }
   };
 }
-var import_node_child_process10, import_node_crypto16, fs11, path11, readline3, ACPClient;
+var import_node_child_process10, import_node_crypto16, fs11, path11, readline3, ACPClient, LEGACY_APPROVE_OPTION_ID;
 var init_acp = __esm({
   "../adapters/src/_core/acp.ts"() {
     "use strict";
@@ -160559,13 +160665,14 @@ var init_acp = __esm({
     init_transcript();
     init_filter_extra_args();
     ACPClient = class {
-      constructor(write, onOutput, onTelemetry, onStop, acceptNotification = () => true, finalUsageIsAuthoritative = false) {
+      constructor(write, onOutput, onTelemetry, onStop, acceptNotification = () => true, finalUsageIsAuthoritative = false, vendorUsage) {
         this.write = write;
         this.onOutput = onOutput;
         this.onTelemetry = onTelemetry;
         this.onStop = onStop;
         this.acceptNotification = acceptNotification;
         this.finalUsageIsAuthoritative = finalUsageIsAuthoritative;
+        this.vendorUsage = vendorUsage;
       }
       nextId = 0;
       pending = /* @__PURE__ */ new Map();
@@ -160579,7 +160686,37 @@ var init_acp = __esm({
        * 是否还在流。每收到一条 session/update / session/notification 就 +1，主循环轮询该值。
        */
       notificationCount = 0;
+      /** 厂商私有用量：已完成轮次的累计 + 当前轮的最新快照，两者相加即 this.usage。 */
+      vendorTurnBase = newUsageAcc();
+      vendorTurnSnapshot = newUsageAcc();
+      applyVendorUsage(params) {
+        const picked = this.vendorUsage?.pick(params);
+        if (!picked) return;
+        this.vendorTurnSnapshot = {
+          inputTokens: picked.inputTokens ?? 0,
+          outputTokens: picked.outputTokens ?? 0,
+          cacheReadTokens: picked.cacheReadTokens ?? 0,
+          cacheCreationTokens: picked.cacheCreationTokens ?? 0
+        };
+        this.usage = {
+          inputTokens: this.vendorTurnBase.inputTokens + this.vendorTurnSnapshot.inputTokens,
+          outputTokens: this.vendorTurnBase.outputTokens + this.vendorTurnSnapshot.outputTokens,
+          cacheReadTokens: this.vendorTurnBase.cacheReadTokens + this.vendorTurnSnapshot.cacheReadTokens,
+          cacheCreationTokens: this.vendorTurnBase.cacheCreationTokens + this.vendorTurnSnapshot.cacheCreationTokens
+        };
+      }
+      /** 新一轮 prompt 发出前，把上一轮的快照折进基数（快照是「当前轮」口径，会归零重来）。 */
+      foldVendorTurn() {
+        this.vendorTurnBase = {
+          inputTokens: this.vendorTurnBase.inputTokens + this.vendorTurnSnapshot.inputTokens,
+          outputTokens: this.vendorTurnBase.outputTokens + this.vendorTurnSnapshot.outputTokens,
+          cacheReadTokens: this.vendorTurnBase.cacheReadTokens + this.vendorTurnSnapshot.cacheReadTokens,
+          cacheCreationTokens: this.vendorTurnBase.cacheCreationTokens + this.vendorTurnSnapshot.cacheCreationTokens
+        };
+        this.vendorTurnSnapshot = newUsageAcc();
+      }
       request(method, params) {
+        if (this.vendorUsage && method === "session/prompt") this.foldVendorTurn();
         const id = this.nextId++;
         return new Promise((resolve10, reject) => {
           this.pending.set(id, { resolve: resolve10, reject, method });
@@ -160631,11 +160768,15 @@ var init_acp = __esm({
       handleAgentRequest(raw) {
         const method = raw["method"];
         const id = raw["id"];
-        const resp = method === "session/request_permission" ? { jsonrpc: "2.0", id, result: { outcome: { outcome: "selected", optionId: "approve_for_session" } } } : { jsonrpc: "2.0", id, error: { code: -32601, message: `method not found: ${method}` } };
+        const resp = method === "session/request_permission" ? { jsonrpc: "2.0", id, result: { outcome: { outcome: "selected", optionId: pickApprovalOptionId(raw["params"]) } } } : { jsonrpc: "2.0", id, error: { code: -32601, message: `method not found: ${method}` } };
         this.write(JSON.stringify(resp) + "\n");
       }
       handleNotification(raw) {
         const method = raw["method"];
+        if (this.vendorUsage && method === this.vendorUsage.method) {
+          this.applyVendorUsage(raw["params"]);
+          return;
+        }
         if (method !== "session/update" && method !== "session/notification") return;
         const params = raw["params"];
         if (!params?.update) return;
@@ -160794,6 +160935,7 @@ var init_acp = __esm({
         });
       }
     };
+    LEGACY_APPROVE_OPTION_ID = "approve_for_session";
   }
 });
 
@@ -160895,6 +161037,72 @@ var init_kiro = __esm({
   }
 });
 
+// ../adapters/src/reasonix/index.ts
+var REASONIX_BLOCKED_FLAGS, REASONIX_USAGE_NOTIFICATION, ReasonixAdapter;
+var init_reasonix = __esm({
+  "../adapters/src/reasonix/index.ts"() {
+    "use strict";
+    init_acp();
+    REASONIX_BLOCKED_FLAGS = /* @__PURE__ */ new Map([
+      ["--model", "value"],
+      ["--planner", "value"],
+      ["--sandbox-network", "value"],
+      ["--sandbox-bash", "value"],
+      ["--workspace-only", "boolean"]
+    ]);
+    REASONIX_USAGE_NOTIFICATION = {
+      method: "_reasonix.io/session/status_update",
+      pick(params) {
+        const rec = (v2) => v2 && typeof v2 === "object" && !Array.isArray(v2) ? v2 : void 0;
+        const num2 = (v2) => typeof v2 === "number" && Number.isFinite(v2) && v2 >= 0 ? v2 : void 0;
+        const turn = rec(rec(rec(rec(params)?.["status"])?.["usage"])?.["turn"]);
+        if (!turn) return void 0;
+        const promptTokens = num2(turn["promptTokens"]);
+        const cacheHit = num2(turn["cacheHitTokens"]);
+        const cacheMiss = num2(turn["cacheMissTokens"]);
+        const inputTokens = cacheMiss ?? (promptTokens === void 0 ? void 0 : Math.max(0, promptTokens - (cacheHit ?? 0)));
+        const outputTokens = num2(turn["completionTokens"]);
+        if (inputTokens === void 0 && outputTokens === void 0 && cacheHit === void 0) return void 0;
+        return {
+          ...inputTokens !== void 0 ? { inputTokens } : {},
+          ...outputTokens !== void 0 ? { outputTokens } : {},
+          ...cacheHit !== void 0 ? { cacheReadTokens: cacheHit } : {}
+        };
+      }
+    };
+    ReasonixAdapter = class {
+      constructor(opts = {}) {
+        this.opts = opts;
+      }
+      /** ADR-0093：ACP 引擎原生支持对话追加（同 session 二次 session/prompt）。 */
+      capabilities = { appendInput: true };
+      spawn(job) {
+        return runACPSession(job, {
+          bin: this.opts.reasonixBin ?? "reasonix",
+          args: [
+            "acp",
+            "--planner",
+            "auto",
+            "--sandbox-network",
+            "auto",
+            "--sandbox-bash",
+            "auto",
+            "--workspace-only"
+          ],
+          model: this.opts.model,
+          resumeMethod: "session/resume",
+          vendorUsageNotification: REASONIX_USAGE_NOTIFICATION,
+          blockedFlags: REASONIX_BLOCKED_FLAGS,
+          workRoot: this.opts.workRoot,
+          cleanupWorkdir: this.opts.cleanupWorkdir,
+          env: this.opts.env,
+          extraArgs: this.opts.extraArgs
+        });
+      }
+    };
+  }
+});
+
 // ../adapters/src/_core/subprocess.ts
 async function materialize(job, cfg) {
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
@@ -161975,6 +162183,7 @@ var init_src6 = __esm({
     init_hermes();
     init_kimi();
     init_kiro();
+    init_reasonix();
     init_cursor();
     init_codebuddy();
     init_gemini();
@@ -163962,6 +164171,7 @@ async function startOasisServer(opts) {
                   ...tokenClaims.artifactId !== void 0 ? { artifactId: tokenClaims.artifactId } : {},
                   durableRefs: tokenClaims.artifactId !== void 0 ? [{ kind: "artifact", id: tokenClaims.artifactId, label: body.command }] : [],
                   at: (/* @__PURE__ */ new Date()).toISOString(),
+                  ...listArg("pendingSteps") ? { pendingSteps: listArg("pendingSteps") } : {},
                   ...delivered ? { delivered } : {}
                 });
               } catch (error2) {
@@ -166323,7 +166533,14 @@ var init_memory_registry_store = __esm({
         this.skillFiles.delete(skillId);
       }
       async putVariable(v2) {
-        this.variables.set(this._varKey(v2.key, v2.actorId, v2.projectId), { ...v2 });
+        const mk = this._varKey(v2.key, v2.actorId, v2.projectId);
+        const ex = this.variables.get(mk);
+        this.variables.set(mk, { ...v2, ...ex?.lastUsedAt !== void 0 ? { lastUsedAt: ex.lastUsedAt } : {} });
+      }
+      async touchVariableUsage(key, actorId, projectId, when) {
+        const mk = this._varKey(key, actorId, projectId);
+        const ex = this.variables.get(mk);
+        if (ex) this.variables.set(mk, { ...ex, lastUsedAt: when });
       }
       async patchVariableValue(key, actorId, valueEncrypted, updatedAt) {
         const mk = this._varKey(key, actorId);
@@ -166577,12 +166794,11 @@ function systemHandoffFor(run, checkpoint = null, effects = []) {
     summary: `[system_reconstructed] attempt=${run.id} outcome=${outcome} reason=${terminalReason}; ${progress}`.slice(0, 400),
     changedOutputs: structuredClone(run.outputRefs),
     unresolvedIssues: [],
-    risks: [
-      ...run.errorMessage ? [run.errorMessage.slice(0, 400)] : [],
-      ...pendingEffects || failedEffects ? [`external effects: pending=${pendingEffects}, failed=${failedEffects}`] : []
-    ],
+    // 与 PG 触发器同口径（2026-08-18）：risks / verificationGaps 只装业务语义的东西。会话怎么死的
+    // 已在 summary 的 reason= 段里，不再冒充成「交付物的风险」；「没有断点」也不是「验证缺口」。
+    risks: pendingEffects || failedEffects ? [`external effects: pending=${pendingEffects}, failed=${failedEffects}`] : [],
     nextActions: structuredClone(checkpoint?.pendingSteps ?? []),
-    verificationGaps: checkpoint ? [] : ["No valid pre-terminal checkpoint was available."],
+    verificationGaps: [],
     userHandoff: null,
     createdAt: run.endedAt ?? run.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString()
   };
@@ -166972,6 +167188,13 @@ var init_memory_trace_store = __esm({
         const handoff = this.handoffs.get(attemptId);
         return handoff ? structuredClone(handoff) : null;
       }
+      async getHandoffByOutputVersion(version2) {
+        const hits = [...this.handoffs.values()].filter((h) => h.changedOutputs.some((ref2) => ref2.version === version2));
+        if (hits.length === 0) return null;
+        let best = hits[0];
+        for (const h of hits.slice(1)) if (h.createdAt >= best.createdAt) best = h;
+        return structuredClone(best);
+      }
       async listAttempts(workOrderId) {
         return [...this.runs.values()].filter((run) => run.workOrderId === workOrderId && run.nodeId !== null).sort((a, b2) => (a.nodeId ?? "").localeCompare(b2.nodeId ?? "") || (a.attemptNo ?? 0) - (b2.attemptNo ?? 0)).map((run) => this.decorate(structuredClone(run)));
       }
@@ -174471,9 +174694,37 @@ ${input.description}
           // 非连接器写入到此 deliveryMode 必非空（上面已拦）；连接器写入沿用 env（其值经 sensitiveVars 剔除，不进 env）。
           deliveryMode: v2.deliveryMode ?? "env",
           valueEncrypted: v2.encrypted === false ? `plain:${v2.value}` : this.encrypt(v2.value),
-          updatedAt: this.now()
+          updatedAt: this.now(),
+          // ADR 凭据保险库补章 §D2.2：expiresAt 写侧穿透——**显式带 key**（含 undefined），使清空（传空→undefined）
+          // 也落到底（store 两实现都按此覆盖）。lastUsedAt 从不由写侧传，取用时另刷（§D2.3）。
+          expiresAt: v2.expiresAt
         });
       }
+      /** ADR 凭据保险库补章 §D2.3：某一行变量「明文真被取用」→ 刷 lastUsedAt。行按 (key, actorId?, projectId?)
+       *  唯一键定位（与 put/delete 同址）。store 未实现该方法时静默跳过（不影响主功能）。 */
+      async touchVariableUsage(key, origin, when) {
+        await this.opts.store.touchVariableUsage?.(key, origin?.actorId, origin?.projectId, when ?? this.now());
+      }
+      /**
+       * ADR 凭据保险库补章 §D1.2：**人类控制台** reveal 的取值——不走 agent 的 `resolveActorProvisionEntries`
+       * 解析链（人类既无 personal 变量也无派单 artifactId，那条链恒空）。直接按存储唯一键取该行、解出明文。
+       *   - `selector` 由控制台列表行给出（personal 带 actorId、project 带 projectId、global 两者皆空）——
+       *     与 `GET /api/variables`「对所有人类返回全量」的可见口径一致（补章 §D1.3），列得到即 reveal 得到。
+       *   - 命中返回明文 + 该行的 origin（供刷 lastUsedAt）；未命中（无此行）返回 null（路由映射 403，与 agent 同壳）。
+       */
+      async revealHumanValue(key, selector) {
+        const wantActor = selector?.actorId;
+        const wantProject = selector?.projectId;
+        const rows = await this.opts.store.listVariables();
+        const row = rows.find(
+          (r) => r.key === key && (r.actorId ?? void 0) === (wantActor ?? void 0) && (r.projectId ?? void 0) === (wantProject ?? void 0)
+        );
+        if (!row) return null;
+        return {
+          value: this.decodeCiphertext(row.valueEncrypted),
+          origin: { ...row.actorId !== void 0 ? { actorId: row.actorId } : {}, ...row.projectId !== void 0 ? { projectId: row.projectId } : {} }
+        };
+      }
       /** 更新已有变量的 encrypted 属性（重新加密或解密），不改其他字段 */
       async patchVariableEncryption(key, actorId, encrypted) {
         const ct = await this.opts.store.getVariableCiphertext(key, actorId);
@@ -174512,7 +174763,10 @@ ${input.description}
             // 缺省视为 env（ADR §4.4；存量行读侧统一回填）
             encrypted: !isPlain,
             maskedValue: isPlain ? r.valueEncrypted.slice(6) : mask(this.decrypt(r.valueEncrypted)),
-            updatedAt: r.updatedAt
+            updatedAt: r.updatedAt,
+            // ADR 凭据保险库补章 §D2.1：到期/取用时间戳透传（展示层据此染色；补章 §D2.4）。
+            ...r.expiresAt !== void 0 ? { expiresAt: r.expiresAt } : {},
+            ...r.lastUsedAt !== void 0 ? { lastUsedAt: r.lastUsedAt } : {}
           };
         });
       }
@@ -174605,7 +174859,12 @@ ${input.description}
         const gated = (row) => !row.connectorId || enabledConnectors.has(row.connectorId);
         const put = (row) => {
           if (!gated(row)) return;
-          merged.set(row.key, { key: row.key, value: this.decodeCiphertext(row.valueEncrypted), deliveryMode: row.deliveryMode ?? "env" });
+          merged.set(row.key, {
+            key: row.key,
+            value: this.decodeCiphertext(row.valueEncrypted),
+            deliveryMode: row.deliveryMode ?? "env",
+            origin: { ...row.actorId !== void 0 ? { actorId: row.actorId } : {}, ...row.projectId !== void 0 ? { projectId: row.projectId } : {} }
+          });
         };
         for (const row of rows) {
           if (row.scope === "global" && !row.actorId) put(row);
@@ -174625,7 +174884,7 @@ ${input.description}
       async resolveRevealValue(actorId, key, opts) {
         const entries = await this.resolveActorProvisionEntries(actorId, { ...opts, refreshConnectors: false });
         const hit = entries.find((e) => e.key === key);
-        return hit ? { value: hit.value } : null;
+        return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
         const iv = (0, import_node_crypto26.randomBytes)(12);
@@ -175854,6 +176113,21 @@ var init_connector_skills = __esm({
 function isKnownRevealSource(source) {
   return CREDENTIAL_REVEAL_SOURCES.has(source) || source.startsWith("agent-skill:");
 }
+function clientMetaFromReq(req) {
+  const fwd = req.raw?.headers?.["x-forwarded-for"];
+  const fwdFirst = (Array.isArray(fwd) ? fwd[0] : fwd)?.split(",")[0]?.trim();
+  const clientIp = fwdFirst || req.raw?.socket?.remoteAddress || void 0;
+  const ua = req.raw?.headers?.["user-agent"];
+  const userAgent = (Array.isArray(ua) ? ua[0] : ua) || void 0;
+  return { ...clientIp ? { clientIp } : {}, ...userAgent ? { userAgent } : {} };
+}
+function normalizeExpiresAt(raw) {
+  if (raw === void 0 || raw === null || raw === "") return void 0;
+  if (typeof raw !== "string") throw new ApiError(400, "BAD_REQUEST", "expiresAt \u987B\u4E3A ISO-8601 \u5B57\u7B26\u4E32");
+  const t = Date.parse(raw);
+  if (Number.isNaN(t)) throw new ApiError(400, "BAD_REQUEST", `expiresAt \u4E0D\u662F\u5408\u6CD5\u65E5\u671F\uFF1A${raw}`);
+  return new Date(t).toISOString();
+}
 function positionsFromPayload(body) {
   if (!body) return void 0;
   if (Object.prototype.hasOwnProperty.call(body, "roles")) {
@@ -175888,6 +176162,8 @@ function actorsDomain(opts) {
   const { resolveCtx } = opts;
   const revealLimits = opts.credentialRevealLimits ?? { perSession: 200, perSessionPerKey: 20 };
   const revealLimiter = new RevealRateLimiter(revealLimits.perSession, revealLimits.perSessionPerKey);
+  const consoleRevealLimits = opts.credentialRevealLimits?.console ?? { perSession: 60, perSessionPerKey: 10 };
+  const consoleRevealLimiter = new RevealRateLimiter(consoleRevealLimits.perSession, consoleRevealLimits.perSessionPerKey);
   return (router) => {
     router.get("/api/actors", async (req) => {
       const { service } = await resolveCtx(req.auth.companyId);
@@ -176174,11 +176450,6 @@ function actorsDomain(opts) {
       }
     };
     const auditVariableChange = async (req, kind, variableKey, targetScope) => {
-      const fwd = req.raw?.headers?.["x-forwarded-for"];
-      const fwdFirst = (Array.isArray(fwd) ? fwd[0] : fwd)?.split(",")[0]?.trim();
-      const clientIp = fwdFirst || req.raw?.socket?.remoteAddress || void 0;
-      const ua = req.raw?.headers?.["user-agent"];
-      const userAgent = (Array.isArray(ua) ? ua[0] : ua) || void 0;
       await opts.credentialAudit?.({
         kind,
         actor: req.auth.actor,
@@ -176186,8 +176457,7 @@ function actorsDomain(opts) {
         targetScope,
         source: "console",
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        ...clientIp ? { clientIp } : {},
-        ...userAgent ? { userAgent } : {}
+        ...clientMetaFromReq(req)
       });
     };
     router.get("/api/variables", async (req) => {
@@ -176200,6 +176470,7 @@ function actorsDomain(opts) {
       const { service } = await resolveCtx(req.auth.companyId);
       const b2 = req.body;
       if (!b2?.key) throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 key");
+      const expiresAt2 = normalizeExpiresAt(b2.expiresAt);
       if (b2.scope !== "global" && b2.scope !== "personal" && b2.scope !== "project") {
         throw new ApiError(
           400,
@@ -176240,7 +176511,8 @@ function actorsDomain(opts) {
         ...b2.deliveryMode !== void 0 ? { deliveryMode: b2.deliveryMode } : {},
         ...b2.connectorId !== void 0 ? { connectorId: b2.connectorId } : {},
         ...b2.overrides !== void 0 ? { overrides: b2.overrides } : {},
-        ...b2.encrypted !== void 0 ? { encrypted: b2.encrypted } : {}
+        ...b2.encrypted !== void 0 ? { encrypted: b2.encrypted } : {},
+        expiresAt: expiresAt2
       });
       await auditVariableChange(
         req,
@@ -176278,6 +176550,7 @@ function actorsDomain(opts) {
       const actorId = req.params.id;
       const b2 = req.body;
       if (!b2?.key) throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 key");
+      const expiresAt2 = normalizeExpiresAt(b2.expiresAt);
       if (b2.deliveryMode !== void 0 && b2.deliveryMode !== "env" && b2.deliveryMode !== "ref" && b2.deliveryMode !== "broker") {
         throw new ApiError(400, "BAD_REQUEST", "deliveryMode \u53EA\u80FD\u662F env\u3001ref \u6216 broker");
       }
@@ -176308,7 +176581,8 @@ function actorsDomain(opts) {
         ...b2.deliveryMode !== void 0 ? { deliveryMode: b2.deliveryMode } : {},
         ...b2.connectorId !== void 0 ? { connectorId: b2.connectorId } : {},
         ...b2.overrides !== void 0 ? { overrides: b2.overrides } : {},
-        ...b2.encrypted !== void 0 ? { encrypted: b2.encrypted } : {}
+        ...b2.encrypted !== void 0 ? { encrypted: b2.encrypted } : {},
+        expiresAt: expiresAt2
       });
       await auditVariableChange(req, "credential_write", b2.key, `personal:${actorId}`);
       return { status: 201, body: { ok: true } };
@@ -176329,25 +176603,33 @@ function actorsDomain(opts) {
       const source = typeof b2?.source === "string" && b2.source.trim() || "agent-cli";
       if (!isKnownRevealSource(source)) throw new ApiError(400, "BAD_REQUEST", `\u672A\u8BC6\u522B\u7684 source\u300C${source}\u300D\uFF08\xA74.5.4\uFF1A\u53EA\u63A5\u53D7\u8BC6\u522B\u503C\uFF09`);
       const actor = req.auth.actor;
+      const isHuman2 = isHumanActor(actor);
+      const isConsole = source === "console";
+      const timestamp = (/* @__PURE__ */ new Date()).toISOString();
       const artifactId = req.auth.dispatch?.artifactId;
       const sessionId = req.auth.dispatch?.sessionId;
-      const now = Date.now();
-      const timestamp = new Date(now).toISOString();
-      const sessionKey = sessionId ?? `${actor}::${artifactId ?? "no-artifact"}`;
       const dispatchFields = { ...sessionId ? { sessionId } : {}, ...artifactId ? { artifactId } : {} };
-      const throttled = revealLimiter.check(sessionKey, key, now);
+      const consoleMeta = isConsole ? clientMetaFromReq(req) : {};
+      if (isConsole && !isHuman2) {
+        await opts.credentialAudit?.({ kind: "credential_reveal_denied", actor, variableKey: key, source, timestamp, reason: "no_permission", ...dispatchFields, ...consoleMeta });
+        return { status: 403, body: { code: "denied", key } };
+      }
+      const now = Date.now();
+      const sessionKey = isConsole ? actor : sessionId ?? `${actor}::${artifactId ?? "no-artifact"}`;
+      const limiter = isConsole ? consoleRevealLimiter : revealLimiter;
+      const throttled = limiter.check(sessionKey, key, now);
       if (throttled) {
-        await opts.credentialAudit?.({ kind: "credential_reveal_throttled", actor, variableKey: key, source, timestamp, scope: throttled, ...dispatchFields });
+        await opts.credentialAudit?.({ kind: "credential_reveal_throttled", actor, variableKey: key, source, timestamp, scope: throttled, ...dispatchFields, ...consoleMeta });
         return { status: 429, body: { code: "throttled", key, scope: throttled } };
       }
-      const scope = artifactId && opts.resolveDispatchScope ? await opts.resolveDispatchScope(artifactId) : {};
-      const resolved = await service.resolveRevealValue(actor, key, scope);
+      const resolved = isHuman2 ? await service.revealHumanValue(key, { ...b2?.actorId ? { actorId: b2.actorId } : {}, ...b2?.projectId ? { projectId: b2.projectId } : {} }) : await service.resolveRevealValue(actor, key, artifactId && opts.resolveDispatchScope ? await opts.resolveDispatchScope(artifactId) : {});
       if (!resolved) {
         const reason = await service.hasVariableKey(key) ? "no_permission" : "not_found";
-        await opts.credentialAudit?.({ kind: "credential_reveal_denied", actor, variableKey: key, source, timestamp, reason, ...dispatchFields });
+        await opts.credentialAudit?.({ kind: "credential_reveal_denied", actor, variableKey: key, source, timestamp, reason, ...dispatchFields, ...consoleMeta });
         return { status: 403, body: { code: "denied", key } };
       }
-      await opts.credentialAudit?.({ kind: "credential_reveal", actor, variableKey: key, source, timestamp, ...dispatchFields });
+      await opts.credentialAudit?.({ kind: "credential_reveal", actor, variableKey: key, source, timestamp, ...dispatchFields, ...consoleMeta });
+      await service.touchVariableUsage(key, resolved.origin, timestamp);
       return { status: 200, body: { value: resolved.value } };
     });
     router.get("/api/variables/reveal-audit", async (req) => {
@@ -176850,7 +177132,7 @@ var init_routes2 = __esm({
     init_image_upload();
     init_skill_materializer();
     init_connector_skills();
-    CREDENTIAL_REVEAL_SOURCES = /* @__PURE__ */ new Set(["agent-cli", "agent-exec", "smoke-test", "oasis-internal"]);
+    CREDENTIAL_REVEAL_SOURCES = /* @__PURE__ */ new Set(["agent-cli", "agent-exec", "smoke-test", "oasis-internal", "console"]);
     RevealRateLimiter = class {
       constructor(perSession, perSessionPerKey, ttlMs = 2 * 60 * 6e4) {
         this.perSession = perSession;
@@ -183066,8 +183348,8 @@ function executionContinuityDomain(service) {
       if (b2.changedOutputs !== void 0 && !isRefArray(b2.changedOutputs) || b2.unresolvedIssues !== void 0 && !isStringArray(b2.unresolvedIssues) || b2.risks !== void 0 && !isStringArray(b2.risks) || b2.nextActions !== void 0 && !isStringArray(b2.nextActions) || b2.verificationGaps !== void 0 && !isStringArray(b2.verificationGaps)) {
         throw new ApiError(400, "BAD_REQUEST", "handoff arrays contain invalid values");
       }
-      if (!isUserHandoff(b2.userHandoff)) {
-        throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11\u5408\u6CD5\u7684 userHandoff\uFF1BAgent \u5FC5\u987B\u63D0\u4EA4\u672C\u6B21\u5DE5\u4F5C\u7684\u4E1A\u52A1\u4EA4\u63A5\u6458\u8981");
+      if (b2.userHandoff !== void 0 && b2.userHandoff !== null && !isUserHandoff(b2.userHandoff)) {
+        throw new ApiError(400, "BAD_REQUEST", "userHandoff \u5F62\u72B6\u975E\u6CD5\uFF08\u53EF\u4EE5\u4E0D\u7ED9\uFF1B\u7ED9\u4E86\u5C31\u8981\u5408\u6CD5\uFF09");
       }
       const handoff = await service.handoff({
         attemptId,
@@ -183118,10 +183400,20 @@ function renderResumePack(pack) {
   if (!pack.previousAttempt) lines.push("- This is the first attempt.");
   else {
     lines.push(`- Attempt ${pack.previousAttempt.attemptNo ?? "?"}: ${pack.previousHandoff?.summary || pack.previousAttempt.status}`);
-    if (pack.latestCheckpoint) {
-      lines.push(`- Recoverability: ${pack.latestCheckpoint.recoverability}`);
-      for (const step of pack.latestCheckpoint.pendingSteps) lines.push(`  - pending: ${step}`);
-      for (const ref2 of pack.latestCheckpoint.durableRefs) lines.push(`  - durable: ${ref2.kind}:${ref2.id}${ref2.version ? `@${ref2.version}` : ""}`);
+    const cp = pack.latestCheckpoint;
+    const done = cp?.completedStepIds ?? [];
+    const durable = (cp?.durableRefs.length ? cp.durableRefs : pack.previousHandoff?.changedOutputs) ?? [];
+    if (cp) lines.push(`- Recoverability: ${cp.recoverability}`);
+    if (done.length > 0) lines.push(`- \u4E0A\u4E00\u8D9F\u5DF2\u5B8C\u6210\u7684\u6B65\u9AA4\uFF1A${done.join("\u3001")}`);
+    for (const ref2 of durable) {
+      lines.push(`  - durable: ${ref2.kind}:${ref2.id}${ref2.version ? `@${ref2.version}` : ""}${ref2.label ? ` \u2014 ${ref2.label}` : ""}`);
+    }
+    if (cp && cp.pendingSteps.length > 0) {
+      for (const step of cp.pendingSteps) lines.push(`  - pending: ${step}`);
+    } else {
+      lines.push(
+        durable.length > 0 || done.length > 0 ? "- \u672A\u5B8C\u6210\u7684\u6B65\u9AA4\uFF1A**\u672A\u77E5**\uFF08\u4E0A\u4E00\u8D9F\u6CA1\u7559 checkpoint\uFF09\u2014\u2014\u4EE5\u4E0A\u9762\u8FD9\u4E9B\u5DF2\u843D\u5730\u7684\u4EA7\u51FA\u4E3A\u51C6\uFF0C\u81EA\u5DF1\u6838\u5BF9\u8FD8\u7F3A\u4EC0\u4E48\uFF0C\u522B\u4ECE\u5934\u91CD\u505A\u3002" : "- \u4E0A\u4E00\u8D9F\u6CA1\u7559\u4E0B\u4EFB\u4F55\u53EF\u6062\u590D\u7684\u75D5\u8FF9\uFF08\u6CA1\u8DD1\u5230\u4EFB\u4F55\u6301\u4E45\u5316\u547D\u4EE4\uFF09\u2014\u2014\u6309\u9996\u6B21\u6267\u884C\u5904\u7406\u3002"
+      );
     }
   }
   lines.push("", "## External effects");
@@ -183230,6 +183522,7 @@ function renderCoordinatorView(view) {
 function shouldInjectResumePack(pack) {
   const status = pack?.previousAttempt?.status;
   if (!status) return false;
+  if (status === "running" || status === "queued") return false;
   return status !== "succeeded" && status !== "no-output";
 }
 function renderContinuityProtocol() {
@@ -183462,9 +183755,6 @@ var init_service7 = __esm({
       async handoff(input) {
         if (!HANDOFF_OUTCOMES2.has(input.outcome)) throw new Error(`invalid handoff outcome: ${input.outcome}`);
         if (!input.summary.trim()) throw new Error("handoff summary is required");
-        if (input.producedBy === "agent" && !input.userHandoff) {
-          throw new Error("agent-authored handoff requires userHandoff");
-        }
         const userHandoff = input.userHandoff ? normalizeUserHandoff(input.outcome, input.changedOutputs ?? [], input.userHandoff) : void 0;
         const attempt = await this.awaitAttempt(input.attemptId);
         const handoff = await this.afterAttemptVisible(() => this.store.putHandoff({
@@ -183668,8 +183958,7 @@ var init_service7 = __esm({
           "failed"
         ].map((state) => [state, nodes.filter((node) => node.nodeState === state).length]));
         const collaborationStatus = nodes.length > 0 && nodes.every((node) => DONE_STATES.has(node.nodeState)) ? "completed" : nodes.some((node) => BLOCKING_STATES.has(node.nodeState)) ? "needs_coordination" : "in_progress";
-        const handoffSummary = [...nodes].sort((a, b2) => Number(BLOCKING_STATES.has(b2.nodeState)) - Number(BLOCKING_STATES.has(a.nodeState))).map((node) => node.summary.trim()).find(Boolean) ?? "";
-        return { workOrderId, mode: this.mode, collaborationStatus, handoffSummary, progress, nodes, dependencyBlocks, todo: todos };
+        return { workOrderId, mode: this.mode, collaborationStatus, progress, nodes, dependencyBlocks, todo: todos };
       }
     };
   }
@@ -183804,8 +184093,7 @@ function createUpstreamHandoffInputResolver(opts) {
       const edge = snapshot.edges.find(
         (candidate) => candidate.fromNodeId === input.upstreamNodeId && candidate.toNodeId === input.downstreamNodeId
       );
-      const downstream = snapshot.nodes.find((node) => node.id === input.downstreamNodeId);
-      const businessEdge = edge?.kind === "data" && edge.required && downstream?.fields?.[BUSINESS_HANDOFF_POLICY_FIELD] !== BUSINESS_HANDOFF_POLICY_EXEMPT;
+      const businessEdge = edge?.kind === "data" && edge.required;
       if (!businessEdge) return null;
       if (edge.pinnedWorkId !== input.pinnedWorkId) {
         warn(
@@ -183831,7 +184119,7 @@ function createUpstreamHandoffInputResolver(opts) {
         version: input.pinnedWorkId,
         ...upstreamNode?.title ? { label: upstreamNode.title } : {}
       }];
-      const deliveredRow = typeof work.sessionRef === "string" && work.sessionRef ? await opts.getHandoff(work.sessionRef).catch(() => null) : null;
+      const deliveredRow = await opts.getHandoffByOutputVersion(input.pinnedWorkId).catch(() => null);
       const systemHandoff = () => renderDeliveredWorkHandoff({
         upstreamNodeId: input.upstreamNodeId,
         upstreamTitle: upstreamNode?.title,
@@ -183871,7 +184159,6 @@ var INJECTED_TEXT_LIMIT, NONE_TOKENS;
 var init_upstream_handoff_input = __esm({
   "../server/src/domains/execution-continuity/upstream-handoff-input.ts"() {
     "use strict";
-    init_src3();
     INJECTED_TEXT_LIMIT = 4e3;
     NONE_TOKENS = /* @__PURE__ */ new Set(["none", "n/a", "na", "nil", "\u65E0", "\u6CA1\u6709", "\u6682\u65E0"]);
   }
@@ -187514,8 +187801,30 @@ ${ctx.nodeFault}
           ...prov?.connectorCreds && prov.connectorCreds.length > 0 ? { connectorCreds: prov.connectorCreds } : {}
         };
         this.deps.log?.(`[coordinator] ${logMsg}`);
+        const coordinatorRunId = `coordinate:${runtimeSessionId}`;
+        if (this.deps.recordCoordinatorRun) {
+          await this.deps.recordCoordinatorRun({
+            runId: coordinatorRunId,
+            actorId,
+            artifactId,
+            workOrderId: workspace ?? null,
+            runtimeSessionId,
+            bundleFiles: Object.keys(job.bundle.files)
+          }).catch((error2) => {
+            this.deps.log?.(`[coordinator] \u8D26\u672C\u767B\u8BB0\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u672C\u6B21\u4F1A\u8BDD\uFF09\uFF1A${String(error2)}`);
+          });
+        }
         const handle = await this.deps.adapter.spawn(job);
         const exit = await new Promise((resolve10) => handle.onExit(resolve10));
+        if (this.deps.finishCoordinatorRun) {
+          await this.deps.finishCoordinatorRun(coordinatorRunId, {
+            status: exit.code === 0 ? "succeeded" : "failed",
+            exitCode: exit.code,
+            ...exit.reason ? { exitReason: String(exit.reason) } : {}
+          }).catch((error2) => {
+            this.deps.log?.(`[coordinator] \u8D26\u672C\u6536\u5C3E\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u672C\u6B21\u4F1A\u8BDD\uFF09\uFF1A${String(error2)}`);
+          });
+        }
         await this.finalizeStage(token);
         this.registerRetained(artifactId, actorId, runtimeSessionId);
         return { sessionId: runtimeSessionId, managerActorId: actorId, exit };
@@ -188084,7 +188393,10 @@ function rowToVariable(row) {
     // **不塌成 env**，否则未知档位读回来变明文；仅 null/空回填 "env"（存量行）。派单侧按未知档保守处理。
     deliveryMode: typeof row.delivery_mode === "string" && row.delivery_mode ? row.delivery_mode : "env",
     valueEncrypted: row.value_encrypted,
-    updatedAt: new Date(row.updated_at).toISOString()
+    updatedAt: new Date(row.updated_at).toISOString(),
+    // ADR 凭据保险库补章 §D2.1：到期/取用时间戳（text 列存 ISO 字符串，原样带出；null/空 = undefined）。
+    ...row.expires_at ? { expiresAt: row.expires_at } : {},
+    ...row.last_used_at ? { lastUsedAt: row.last_used_at } : {}
   };
 }
 var ident4, PostgresRegistryStore, rowToActor, rowToConfig, rowToAgentPrefs;
@@ -188247,6 +188559,8 @@ var init_postgres_registry = __esm({
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS project_id text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS environment text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS delivery_mode text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS expires_at text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS last_used_at text`);
         await pool.query(`DROP INDEX IF EXISTS "${s2}"."${s2}_variables_key_actor_uq"`);
         await pool.query(`DROP INDEX IF EXISTS "${s2}"."${s2}_variables_scope_uq"`);
         await pool.query(`
@@ -188723,10 +189037,10 @@ var init_postgres_registry = __esm({
       /* ---------- 变量 ---------- */
       async putVariable(v2) {
         await this.pool.query(
-          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at)
-       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9)
+          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at, expires_at)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10)
        ON CONFLICT (key, COALESCE(actor_id, ''), COALESCE(project_id, '')) DO UPDATE
-         SET scope=$2, actor_id=$3, project_id=$4, connector_id=$5, overrides=$6, delivery_mode=$7, value_encrypted=$8, updated_at=$9`,
+         SET scope=$2, actor_id=$3, project_id=$4, connector_id=$5, overrides=$6, delivery_mode=$7, value_encrypted=$8, updated_at=$9, expires_at=$10`,
           [
             v2.key,
             v2.scope,
@@ -188736,10 +189050,18 @@ var init_postgres_registry = __esm({
             v2.overrides ?? null,
             v2.deliveryMode ?? null,
             v2.valueEncrypted,
-            v2.updatedAt
+            v2.updatedAt,
+            v2.expiresAt ?? null
           ]
         );
       }
+      async touchVariableUsage(key, actorId, projectId, when) {
+        await this.pool.query(
+          `UPDATE ${this.s}.variables SET last_used_at=$4
+       WHERE key=$1 AND COALESCE(actor_id,'')=COALESCE($2::text,'') AND COALESCE(project_id,'')=COALESCE($3::text,'')`,
+          [key, actorId ?? null, projectId ?? null, when]
+        );
+      }
       async patchVariableValue(key, actorId, valueEncrypted, updatedAt) {
         const aid = actorId ?? null;
         await this.pool.query(
@@ -190668,6 +190990,9 @@ var init_postgres_trace = __esm({
         await pool.query(`ALTER TABLE "${s2}".node_handoffs ADD COLUMN IF NOT EXISTS part text`);
         await pool.query(`ALTER TABLE "${s2}".node_handoffs ADD COLUMN IF NOT EXISTS user_handoff jsonb`);
         await pool.query(`ALTER TABLE "${s2}".node_handoffs DROP CONSTRAINT IF EXISTS node_handoffs_summary_check`);
+        await pool.query(
+          `CREATE INDEX IF NOT EXISTS node_handoffs_changed_outputs_idx ON "${s2}".node_handoffs USING GIN (changed_outputs)`
+        );
         await pool.query(`
       UPDATE "${s2}".node_handoffs h
       SET job_key=COALESCE(NULLIF(h.job_key, ''), r.job_key, 'attempt:' || h.attempt_id), part=r.part
@@ -190777,15 +191102,26 @@ var init_postgres_trace = __esm({
           END,
           400
         );
+        -- 2026-08-18\uFF1Arisks / verification_gaps \u53EA\u88C5 **\u4E1A\u52A1\u8BED\u4E49** \u7684\u4E1C\u897F\u3002
+        --
+        -- \u75C5\u6839\uFF1A\u8FD9\u91CC\u539F\u672C\u628A NEW.error_message \u585E\u8FDB risks\u3001\u628A\u300C\u6CA1\u6709\u53EF\u7528\u65AD\u70B9\u300D\u585E\u8FDB verification_gaps\u3002
+        -- \u4E24\u8005\u90FD\u4E0D\u662F\u5B83\u4EEC\u5B57\u9762\u7684\u610F\u601D\u2014\u2014\u7EBF\u4E0A\u771F\u5B9E\u503C\u662F
+        --   risks = ["[success] You've hit your session limit - resets 4:40pm (UTC)"]
+        --   verification_gaps = ["No valid pre-terminal checkpoint was available."]
+        -- \u524D\u8005\u662F\u300C\u8FD9\u6B21\u4F1A\u8BDD\u600E\u4E48\u6B7B\u7684\u300D\uFF0C\u540E\u8005\u662F\u300C\u7CFB\u7EDF\u81EA\u5DF1\u6CA1\u6599\u300D\uFF0C\u90FD\u4E0D\u662F\u300C\u4EA4\u4ED8\u7269\u6709\u4EC0\u4E48\u98CE\u9669 / \u54EA\u91CC\u6CA1\u6838\u9A8C\u300D\u3002
+        -- \u5371\u5BB3\u6709\u4E8C\uFF1A(1) \u4EA4\u4ED8\u6210\u529F\u4E4B\u540E\u4F1A\u8BDD\u624D\u8D85\u65F6\u7684\u60C5\u5F62\uFF0C\u8FD9\u4E9B\u4F1A\u88AB\u586B\u8FDB\u7A7A\u5B57\u6BB5\u5E76 **\u771F\u7684\u88AB\u4E0B\u6E38\u8BFB\u5230**\uFF1B
+        -- (2) \u7EDF\u8BA1\u586B\u5145\u7387\u65F6\u5168\u662F\u566A\u97F3\uFF0C\u770B\u8D77\u6765 80% \u6709\u503C\uFF0C\u5176\u5B9E\u6CA1\u4E00\u6761\u662F\u6267\u884C\u4EBA\u5199\u7684\u3002
+        --
+        -- \u4E24\u6761\u4FE1\u606F\u90FD\u4E0D\u4E22\uFF1A\u7EC8\u6001\u539F\u56E0\u5DF2\u5728 summary \u7684 reason= \u6BB5\u91CC\uFF08terminal_reason \u5C31\u53D6\u81EA
+        -- error_message\uFF09\uFF0C\u300C\u6CA1\u6709\u65AD\u70B9\u300D\u4E5F\u5DF2\u5728 summary \u7684 no valid pre-terminal checkpoint \u91CC\u3002
+        -- \u8FD9\u91CC\u53EA\u662F\u4E0D\u518D\u628A\u5B83\u4EEC\u5192\u5145\u6210\u4E1A\u52A1\u5B57\u6BB5\u3002
+        --
+        -- \u5916\u90E8\u6548\u5E94\u7559\u5728 risks\uFF1A\u534A\u6210\u54C1\u526F\u4F5C\u7528\uFF08\u5DF2\u53D1\u51FA\u7684\u8BF7\u6C42 / \u5EFA\u4E86\u4E00\u534A\u7684\u8D44\u6E90\uFF09\u786E\u5B9E\u662F\u4E0B\u6E38\u8BE5\u77E5\u9053\u7684\u98CE\u9669\u3002
         reconstructed_risks :=
-          CASE WHEN NEW.error_message IS NULL THEN '[]'::jsonb
-            ELSE jsonb_build_array(left(NEW.error_message, 400)) END ||
           CASE WHEN COALESCE(pending_effects, 0) = 0 AND COALESCE(failed_effects, 0) = 0 THEN '[]'::jsonb
             ELSE jsonb_build_array('external effects: pending=' || COALESCE(pending_effects, 0) ||
               ', failed=' || COALESCE(failed_effects, 0)) END;
-        reconstructed_gaps := CASE WHEN latest_checkpoint_id IS NULL
-          THEN jsonb_build_array('No valid pre-terminal checkpoint was available.')
-          ELSE '[]'::jsonb END;
+        reconstructed_gaps := '[]'::jsonb;
         INSERT INTO "${s2}".node_handoffs AS current_handoff
           (handoff_id, attempt_id, job_key, part, produced_by, outcome, summary, changed_outputs,
            unresolved_issues, risks, next_actions, verification_gaps, user_handoff, created_at)
@@ -191733,6 +192069,15 @@ var init_postgres_trace = __esm({
         const r = await this.pool.query(`SELECT * FROM ${this.s}.node_handoffs WHERE attempt_id=$1`, [attemptId]);
         return r.rows[0] ? rowToHandoff(r.rows[0]) : null;
       }
+      async getHandoffByOutputVersion(version2) {
+        const r = await this.pool.query(
+          `SELECT * FROM ${this.s}.node_handoffs
+       WHERE changed_outputs @> $1::jsonb
+       ORDER BY created_at DESC LIMIT 1`,
+          [JSON.stringify([{ version: version2 }])]
+        );
+        return r.rows[0] ? rowToHandoff(r.rows[0]) : null;
+      }
       async listAttempts(workOrderId) {
         const r = await this.pool.query(
           `SELECT r.*, (SELECT count(*) FROM ${this.s}.agent_tool_calls tc WHERE tc.run_id=r.id)::int AS tool_call_count
@@ -194470,6 +194815,15 @@ async function buildActorProvision(service, actorId, scope, onBrokerRefused) {
   const brokerRefused = [];
   applyRefDelivery(env, entries, void 0, (k2) => brokerRefused.push(k2));
   if (onBrokerRefused) for (const k2 of brokerRefused) await onBrokerRefused(k2);
+  const brokerSet = new Set(brokerRefused);
+  for (const e of entries) {
+    if (brokerSet.has(e.key)) continue;
+    try {
+      await service.touchVariableUsage(e.key, e.origin);
+    } catch (err) {
+      console.warn(`[credential] touchVariableUsage(${e.key}) \u5931\u8D25\uFF08\u4E0D\u963B\u65AD\u6D3E\u5355\uFF09\uFF1A${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
   return {
     env,
     wrapperPaths: [oasisWrapperScript(), ...provision.wrapperPaths],
@@ -195781,7 +196135,10 @@ async function startServe(opts) {
       ...await materializeSkillFiles({ service: actors.service, actorId, runtimeKind })
     }),
     uploadChatAttachment: async ({ contentBase64 }) => ({ blobRef: await assets.put(new Uint8Array(Buffer.from(contentBase64, "base64"))) }),
-    onDispatchCommandCompleted: async ({ dispatchId, command, durableRefs, at, delivered }) => {
+    onDispatchCommandCompleted: async ({ dispatchId, command, durableRefs, at, delivered, pendingSteps }) => {
+      if (pendingSteps && pendingSteps.length > 0) {
+        traceStoreSink.checkpointState(dispatchId, { pendingSteps: [...pendingSteps] });
+      }
       traceStoreSink.checkpoint(dispatchId, {
         trigger: "important_output",
         // 交作业的那条命令带着版本号（`wk:<节点>:<n>`），比笼统的「动过这个产物」有用得多——
@@ -196909,7 +197266,8 @@ async function startServe(opts) {
             if (!store) throw new Error(`engine store unavailable for ${companyId}`);
             return store.transaction((tx) => tx.loadWorkorder(workOrderId));
           },
-          getHandoff: (attemptId) => traceStore.getHandoff(attemptId)
+          getHandoff: (attemptId) => traceStore.getHandoff(attemptId),
+          getHandoffByOutputVersion: (version2) => traceStore.getHandoffByOutputVersion(version2)
         }),
         executionContinuityInstructions: continuityMode === "off" ? renderBusinessHandoffProtocol() : renderContinuityProtocol(),
         // ★ 恢复包注入（2026-08-17）：从「只有 resume 实验组才给」改成「只要账本开着就给」——
@@ -197529,6 +197887,31 @@ ${st.detail}
         const view = await executionContinuity.service.coordinatorView(workOrderId, defaultCompanyId);
         return view ? renderCoordinatorView(view) : null;
       },
+      // D2（2026-08-18）：协调者会话进执行账本。inputRefs 记下 bundle 里实际发出的文件——
+      // 这是唯一能证明「COORDINATOR_VIEW.md 到底有没有随会话发出去」的痕迹。两处都 fail-open。
+      recordCoordinatorRun: async (input) => {
+        await traceStore.createRun({
+          id: input.runId,
+          actorId: input.actorId,
+          runtimeKind: "claude-code",
+          triggerKind: "intervention",
+          artifactId: input.artifactId,
+          nodeId: input.artifactId,
+          workOrderId: input.workOrderId,
+          runtimeSessionId: input.runtimeSessionId,
+          jobKey: `coordinate::${input.artifactId}`,
+          action: "coordinate",
+          inputRefs: input.bundleFiles.map((name) => ({ kind: "bundle", id: name }))
+        });
+      },
+      finishCoordinatorRun: async (runId, outcome) => {
+        await traceStore.updateRun(runId, {
+          status: outcome.status,
+          exitCode: outcome.exitCode,
+          endedAt: (/* @__PURE__ */ new Date()).toISOString(),
+          ...outcome.exitReason ? { exitReason: outcome.exitReason } : {}
+        });
+      },
       // 阻塞诊断（proposal D1/D3）：派发器运行时信号（queued/fused/backoff/hasInFlight）注入诊断，
       // 让协调者把"资源 / 运行时"病因和"图病"分开——资源排队的节点不会被误唤去砍流程。
       runtimeSignals: (id) => {
@@ -197751,12 +198134,13 @@ var KNOWN2 = [
   { adapter: "copilot", binary: "copilot" },
   { adapter: "kimi", binary: "kimi" },
   { adapter: "kiro", binary: "kiro-cli" },
+  { adapter: "reasonix", binary: "reasonix" },
   { adapter: "pi", binary: "pi" },
   { adapter: "openclaw", binary: "openclaw" },
   { adapter: "codebuddy", binary: "codebuddy" },
   { adapter: "antigravity", binary: "agy" }
 ];
-var NATIVE_APPEND_RUNTIMES = /* @__PURE__ */ new Set(["hermes", "gemini", "kimi", "kiro"]);
+var NATIVE_APPEND_RUNTIMES = /* @__PURE__ */ new Set(["hermes", "gemini", "kimi", "kiro", "reasonix"]);
 function onPath(binary) {
   try {
     const cmd = process.platform === "win32" ? "where" : "which";
@@ -198560,6 +198944,7 @@ async function startNode(opts) {
     copilot: new CopilotAdapter(),
     kimi: new KimiAdapter(),
     kiro: new KiroAdapter(),
+    reasonix: new ReasonixAdapter(),
     pi: new PiAdapter(),
     openclaw: new OpenClawAdapter(),
     codebuddy: new CodebuddyAdapter(),
@@ -199044,7 +199429,8 @@ var COMMAND_DECLS = {
       { name: "unresolved", desc: "\u7559\u7ED9\u4E0B\u6E38\u7684\u672A\u51B3\u4E8B\u9879\uFF08\u5206\u53F7\u5206\u9694\uFF09\u3002\u5199\u8FDB\u672C\u8282\u70B9\u7684\u6280\u672F\u4EA4\u63A5\uFF0C\u4E0B\u6E38\u5F00\u5DE5\u524D\u4F1A\u8BFB\u5230" },
       { name: "risks", desc: "\u4E0B\u6E38\u8BE5\u77E5\u9053\u7684\u98CE\u9669\uFF08\u5206\u53F7\u5206\u9694\uFF09" },
       { name: "next", desc: "\u5EFA\u8BAE\u4E0B\u6E38\u63A5\u7740\u505A\u4EC0\u4E48\uFF08\u5206\u53F7\u5206\u9694\uFF09" },
-      { name: "gaps", desc: "\u4F60\u6CA1\u80FD\u6838\u9A8C\u7684\u90E8\u5206\uFF08\u5206\u53F7\u5206\u9694\uFF09\u2014\u2014\u522B\u8BA9\u4E0B\u6E38\u4EE5\u4E3A\u5DF2\u9A8C\u8FC7" }
+      { name: "gaps", desc: "\u4F60\u6CA1\u80FD\u6838\u9A8C\u7684\u90E8\u5206\uFF08\u5206\u53F7\u5206\u9694\uFF09\u2014\u2014\u522B\u8BA9\u4E0B\u6E38\u4EE5\u4E3A\u5DF2\u9A8C\u8FC7" },
+      { name: "pending", desc: "\u8FD8\u5269\u4EC0\u4E48\u6CA1\u505A\uFF08\u5206\u53F7\u5206\u9694\uFF09\u3002\u5B58\u8FDB\u672C\u8F6E checkpoint\uFF1A\u8FD9\u4E00\u8D9F\u82E5\u88AB\u780D\uFF08\u8D85\u65F6/\u989D\u5EA6/\u6389\u7EBF\uFF09\uFF0C\u4E0B\u4E00\u8D9F\u63A5\u624B\u7684\u4EBA\u636E\u5B83\u63A5\u7740\u505A" }
     ],
     examples: [
       'oasis propose artifact:dev:abc-123 --from-dir deliverable/ --reason "\u4FEE\u590D\u767B\u5F55\u9875\u767D\u5C4F"',
@@ -199217,13 +199603,13 @@ var COMMAND_DECLS = {
   },
   "continuity-checkpoint": {
     group: "\u56FE\u673A\u5236\uFF08\xA76/\xA77\uFF09",
-    usage: "oasis continuity-checkpoint --pending <json-string-array> --recoverability full|partial|none [--trigger plan_completed|stage_completed] [--refs <json-array>] [--completed <json-string-array>]",
+    usage: "oasis continuity-checkpoint --pending <list> --recoverability full|partial|none [--trigger plan_completed|stage_completed] [--refs <json-array>] [--completed <list>]",
     description: "\u4E3A\u5F53\u524D\u6D3E\u53D1 attempt \u8FFD\u52A0\u53EF\u6062\u590D\u68C0\u67E5\u70B9\uFF08\u81EA\u52A8\u4FDD\u7559\u6700\u65B0\u4E94\u4E2A\uFF09\u3002",
     flags: [
-      { name: "pending", desc: "\u5F85\u5B8C\u6210\u6B65\u9AA4 JSON string array", required: true },
+      { name: "pending", desc: `\u5F85\u5B8C\u6210\u6B65\u9AA4\u3002JSON \u6570\u7EC4 '["a","b"]' \u6216\u5206\u53F7\u5206\u9694 "a; b" \u90FD\u6536`, required: true },
       { name: "recoverability", desc: "\u6062\u590D\u7A0B\u5EA6\uFF08full | partial | none\uFF09", required: true },
       { name: "refs", desc: "\u5DF2\u6301\u4E45\u5316\u4EA7\u51FA\u5F15\u7528 JSON array" },
-      { name: "completed", desc: "\u5DF2\u5B8C\u6210\u7A33\u5B9A\u6B65\u9AA4 id JSON string array" },
+      { name: "completed", desc: "\u5DF2\u5B8C\u6210\u7684\u7A33\u5B9A\u6B65\u9AA4 id\u3002JSON \u6570\u7EC4\u6216\u5206\u53F7\u5206\u9694\u90FD\u6536" },
       { name: "trigger", desc: "\u7ED3\u6784\u5316\u8FB9\u754C\uFF08plan_completed | stage_completed\uFF1B\u7701\u7565\u4E3A\u666E\u901A agent checkpoint\uFF09" }
     ],
     examples: [`oasis continuity-checkpoint --pending '["run tests"]' --recoverability full --refs '[{"kind":"file","id":"src/x.ts"}]'`]
@@ -200336,6 +200722,19 @@ function semicolonList(raw, field) {
   const items = raw.split(";").map((x2) => x2.trim()).filter(Boolean);
   return items.length > 0 ? { [field]: items } : {};
 }
+function parseStringArrayFlag(value, name) {
+  const trimmed = value.trim();
+  if (trimmed.startsWith("[")) {
+    const parsed = JSON.parse(trimmed);
+    if (!Array.isArray(parsed) || parsed.some((item) => typeof item !== "string")) {
+      throw new Error(`--${name} \u5FC5\u987B\u662F JSON string array`);
+    }
+    return parsed;
+  }
+  const items = trimmed.split(";").map((x2) => x2.trim()).filter(Boolean);
+  if (items.length === 0) throw new Error(`--${name} \u4E0D\u80FD\u4E3A\u7A7A\uFF08JSON string array\uFF0C\u6216\u5206\u53F7\u5206\u9694\uFF09`);
+  return items;
+}
 async function readStdin() {
   if (process.stdin.isTTY) return "";
   const chunks = [];
@@ -200896,13 +201295,6 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     }
     return parsed;
   };
-  const parseStringArrayFlag = (value, name) => {
-    const parsed = JSON.parse(value);
-    if (!Array.isArray(parsed) || parsed.some((item) => typeof item !== "string")) {
-      throw new Error(`--${name} \u5FC5\u987B\u662F JSON string array`);
-    }
-    return parsed;
-  };
   const parseArrayFlag = (value, name) => {
     const parsed = JSON.parse(value);
     if (!Array.isArray(parsed)) throw new Error(`--${name} \u5FC5\u987B\u662F JSON array`);
@@ -201730,7 +202122,9 @@ ${res.warning}`);
         ...semicolonList(flags.get("unresolved"), "unresolvedIssues"),
         ...semicolonList(flags.get("risks"), "risks"),
         ...semicolonList(flags.get("next"), "nextActions"),
-        ...semicolonList(flags.get("gaps"), "verificationGaps")
+        ...semicolonList(flags.get("gaps"), "verificationGaps"),
+        // 「还剩什么没做」：唯一系统推不出来的字段，挂在本来就要跑的命令上（见 server 的 pendingSteps 注释）
+        ...semicolonList(flags.get("pending"), "pendingSteps")
       });
       println(message);
       break;
@@ -203004,7 +203398,7 @@ function syncRuntimeAssets(candidateRoots, binDir) {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "0.1.108" : "dev";
+var PKG_VERSION = true ? "0.1.110" : "dev";
 var OASIS_DIR = path28.join(os11.homedir(), ".oasis");
 var CONFIG_FILE = path28.join(OASIS_DIR, "node-config.json");
 var PID_FILE = path28.join(OASIS_DIR, "node.pid");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oasis_test",
-  "version": "0.1.108",
+  "version": "0.1.110",
   "description": "Oasis node daemon + CLI — background daemon, auto-start, full server CLI",
   "bin": {
     "oasis": "./dist/index.js"